GOVERNMENT OF THE DISTRICT OF COLUMBIA 
Office of the Chief Financial Officer 

Office of Integrity and Oversight 



MEMORANDUM 



TO: Stephen M. Cordi, Deputy CFO 

Office of Tax and Revenue 

FROM: William J. DiVello, Executive Directo, 
Office of Integrity and Oversight 

DATE: April 20, 2012 




SUBJECT: Fraud Follow-up Report: Individual Income Tax Refunds Issued Fraudulently (IS:001 1- 
0088-A) 



This report summarizes the status of prior audit recommendations provided to the Office of Tax and 
Revenue (OTR) in the Office of Integrity and Oversight's (OIO) report issued September 20, 201 1, 
"Fraud Follow-up Report: Individual Income Tax Refunds Issued Fraudulently." The OIO issued this 
memorandum report to the OTR to determine the actions taken by the agency to address the breach of 
internal controls within the Compliance Administration adjustment unit. This breach resulted in an 
employee's ability to fraudulently receive over $400,000 in individual income tax refunds. As part of 
this report, OIO included a listing of four prior OIO reviews which reported on internal control 
weaknesses in the tax system. 

On April 3, 2012, the OTR provided the status of prior OIO review audit recommendations. OTR's 
response to a draft of this report generally meets the intent of the recommendations contained in the 
prior OIO reports. For report IA:OTR:2904:C08 dated March 23, 2009, OTR can further improve its 
control environment by implementing certain additional management reviews. The OTR response in 
its entirety is attached (Exhibit 1). 

PRIOR OIO AUDIT REPORTS 

Management Alert: Integrated Tax Systems Systemic Weaknesses Hamper Internal Controls 

In this management alert dated January 31, 2008, the Office of Integrity and Oversight cautioned the 
OTR that there were inadequate controls over the ability to make on-line adjustments without 
management approval. Additionally, refunds that are produced as a result of these on-line adjustments 
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are not reviewed by management. We recommended the OTR review the entire adjustment process to 
determine what changes could be made to improve the internal controls. 

Agency Response: OTR has revamped the adjustment process and approval procedures for line item 
adjustments throughout the agency. Daily reports are reviewed by supervisors and the review is 
documented. 

OIO Comment: We consider OTR's action responsive to this recommendation. 

Memorandum: Review of Employee's Activity in ITS based on Dummy Account Alert 
qA:OTR:2904:M02) 

In this memorandum dated February 27, 2009, the OIO found that an employee was able to make 
inappropriate adjustments in the system without managerial oversight. We found that the lack of 
managerial oversight allowed excessive privileges in ITS. As a result, we strongly recommended that 
the RPA Acting Director develop stringent procedures for adjustments to taxpayer accounts ensuring 
that there are controls in place throughout the process. The procedures should include adequate and 
appropriate managerial reviews. 

Agency Response: OTR has made significant changes to the processes in the RPA area including the 
elimination of all but two dummy accounts, necessary to post remittances that cannot be immediately 
processed. Employees in RPA have had modifications to their privileges in ITS to restrict access. 

OIO Comment: We consider OTR's action responsive to this recommendation. 

Memorandum: Results of our Review of OTR Refunds qAOTR:2807:M04) 

In this memorandum dated March 13, 2009, the OIO found that there was a lack of review of refunds 
less than $10,000 which left the agency vulnerable to error and fraud. We recommended OTR 
incorporate a review of refunds less than $10,000 on a sample basis as part of its effort to safeguard the 
District's assets. 

Agency Response: OTR has implemented a sampling of refunds less than $10,000 on a daily basis as 
possible based on all refund volumes. OTR has recently added an FTE to the refund review group in 
RAA to increase the ability to sample more refunds. 



OIO Comment: We consider OTR's action responsive to this recommendation. 
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Memorandum: Review of Audit Adjustments User Rights in ITS qA:OTR:2904:C08) 

In this memorandum dated March 23, 2009, the OIO found that audit assistants were not technically 
proficient to enter audit adjustments. We recommended that the Compliance Administration create a 
group of technically trained auditors enter the adjustments after the adjustments have been reviewed in 
Review and Conference. This would allow audit staff to focus on their audits and decrease the number 
of staff posting to the system. We recommended the audit division develop written policies and 
procedures documenting the adjustment process to ensure consistency and uniformity throughout the 
Audit Division and Compliance Administration. We also recommended the review of management 
reports to identify the status of cases in the case management system to allow for follow-up actions and 
to look for unusual adjusted items. 

Agency Response: The OTR has implemented this recommendation into their policies and 
procedures. A separate adjustment group was created in compliance to make all adjustments into the 
system after they have been through review and conference. This group is under the supervision of the 
Criminal Investigation Division to eliminate any conflicts for the adjusters. All adjustments by the 
adjustment staff are subject to review and are on the employee adjustment reports prepared daily. 
Management reviews the daily reports to look for unusual adjustment patterns. 

OIO Comment: We consider OTR's action responsive to this recommendation; however, we 
recommend there be additional management review of adjustments to compare "requested" authorized 
adjustments to "actual" adjustments made in ITS to ensure any actions taken by adjustment employees 
were for legitimate requests. Additionally, we recommend management consider a review of 
adjustments on a regular basis, monthly to quarterly, to identify exceptions and patterns of unusual 
adjustments. 

We appreciate your response to our request for the status of prior audit recommendations. Should you 
have any questions please contact me at (202) 442-6433 or your staff may contact Mohamed K. 
Yusuff, Director of Internal Audit at (202) 442-8240, or TishaN. Edwards, Senior Audit Manager at 
(202) 442-6446. 

cc: Natwar M. Gandhi, Chief Financial Officer, Government of the District of Columbia 
Angell Jacobs, Chief of Staff, Office of the Chief Financial Officer (OCFO) 
Kathy Crader, Chief Risk Officer, OCFO 
Glen Groff, Director of Operations, OTR 



Attachment 
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Exhibit 1: Office of Tax and Revenue Response 
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DAl'F: April 3, 2012 

SI B.IKC 'I : "Fraud Follow-up Report: Indhutuai Income "I ax Ke lunch Issued I rauUulenuV 

issued on September 20. 201 HIS: 001 1-00SS) 



'I his is an update lo the Rim prior OK) reviews eiiecl at the end ol the finding 

Manitiieincnl Alert: Inlcgiiilcrt tax S> sleim Systemic Weaknesses 1 tam per Internal Controls 

In this management alert dated Jaiuiui) 31 . 2008, the Office ol Imcgiit} and Oversight cautioned 
the O 1 R that there were inadequate con (i ols over the ability In make on-line adjustments without 
management approval. Additionally, relunds that ait produecd as a icsull of ihese on-line 
adjustments are not reviewed by management. Wc leeommend the OTR icvicvv the entire 
adjustment process to determine wlmi changes could be made u> improve the internal controls 



• The Ol R lias completely icsampeJ the adjustment pioecss and approval procedures lor line 
item adjustments throughout the ugenev . 1 he ability to make line item adjustments has been 
severel) curtailed in all administrations and in compliance, the majoi line item adjustment 
administration: a separate tightly, controlled group has been established lo make the actual 
approved adjustment. I'hrougliout the () i K daih reports arc piodnecd documenting the 
adjustments made b} employes, the preOous day The datl> repcnis are rexicwcil b> the 
supervisors and the review is documented. Dnectois o! (he various administrations are 
required to ensuic compliiince with these procedures. 

A final review of the refunds pending b\ revenue accounting beiore release adds an 
additional layer of review lo detect an> patterns suggesting fraudulent netkm . 
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Memorandum: Review nf isnml uicc's Activity jn jXSjbjjy^ 

In this memorandum dated i chimin 27. 2009, the OH ) Itnmd dial an employee was able to make 
iwipnrojMiale adjustments in iliu- system nidimit inaiuiycn.il ou-itiehl. We lound thm ihc lack ol 
managerial oversight allowed excessive privileges in 1 1 S. Vs a result, we strongly recommended 
lira! ihc RI'A Acting Director develop stringent proeedutes for adjustments to i-a.spayer accounts 
ensuring dial there are controls in place throughout ihc process, The procedures should include 
adctpiale and appropriate manage; ial oversight. 



« The O'l R has made significant changes to the processes m the HP \ area including the 
elimination of all but two dummy account*, necessary lo post reimtianecs thai cannot he 
immediately processed with the information provided, until the necessary research is 
completed to post lhcm to the correct account. Employees in Rl» \ have had miulillcatioiis 
lo their pri\ deges ui ITS to restrict their capabilities to those neecssan for the poskion they 
arc working. Also as slated in the response above the supervisor rceen es a daily adjustment 
report that they are requited to review and document. 

Again as a final review RAA re\ ieus ihc pending refunds daily to dctccl fraudulent activity. 

Memorandum: Results of nur t o icw of O'l U Kclumls (1 AUTK: 2 >dj7:MOji ; 

In this memorandum ilalcd March 13, 20(19, the OIO found that there was a lack of review of 
re I mills less than $10,000 which lei! the. agency vulnerable lo ciror and liasid. We teeoni mended 
O'l R incorporate a review o! refunds less than S 1 0.000 on a sample basis as a part ol its el'lorl to 
safeguard the District's assets. 



• 1 lie Ol R has implemented a sampling of refunds less than 41 0.00U on a daily basis as 

possible based on all lelund volumes. '1 he refunds tire also again subject to the RA \ relund 
anal) sis program to dctccl Irnudiilcnt activities in the icfunds past and picsent. O'l li has 
icccntly added an I 1 1, to the refund review group in RAA to increase the ability lo sample 
nioic refunds. 

Memorandum: Review of Audit Adjustments Ucv Rights in I'l S (1A: OTR: 2W:Cu8) 

In Has memorandum dated March 25. 2009. the OK) found that audit assistants weie not technical!) 
proficient lo enter audit adjustments. \\ e recommended thai the Compliance \dminisiiation create 
;i group of technically trained juditoi-. enter the adju -tments after die adjustments have been 
ie\ iewed in Review and Conlerenre. I his would allow audit sniff to loath on then audits and 
decrease the number of stall posting to the system. \\ e recommend die audit division develop 
written policies and procedures documenting the adjustment process lo ensure consistency and 
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unifonmtv throughout the Audit Division and Compliance Admmisliation We also recommended 
the teueu of management reports to identify the status of cases in the ease management s_\stem to 
allow ior follow-up actions and to look ior unusual adjustment items. 

* I he 1'R has implement I this recommendation into then policies and pit ee s, \ 
sepaiate adjustment group was created in compliance lo make all adjustments into the 
stein after thes Innc hecn through review and conference. This group in under the 
supei \ isioti of the Criminal Investigation Division lo eliminate any conflicts lor the 
adjuster who are technical employees from audit attd collection. Written policies and 
procedures were ctealed and disseminated to the staff All adjustments In the adjustment 
staff ate subject to re\ icw and arc on the cinploscc adjustment reports prepared dail\ . 
Management re\ iens the daily reports lo look for unusual adjustment patterns. 

if sou have an\ additional questions or concerns, please contact Glen UrolT, Director of Opetauons. 
at 442-6490, 



